?? ip_vs_proto_ah.c
字號:
/* * ip_vs_proto_ah.c: AH IPSec load balancing support for IPVS * * Version: $Id: ip_vs_proto_ah.c,v 1.1 2003/07/04 15:04:37 wensong Exp $ * * Authors: Julian Anastasov <ja@ssi.bg>, February 2002 * Wensong Zhang <wensong@linuxvirtualserver.org> * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * version 2 as published by the Free Software Foundation; * */#include <linux/module.h>#include <linux/kernel.h>#include <linux/netfilter.h>#include <linux/netfilter_ipv4.h>#include <net/ip_vs.h>/* TODO:struct isakmp_hdr { __u8 icookie[8]; __u8 rcookie[8]; __u8 np; __u8 version; __u8 xchgtype; __u8 flags; __u32 msgid; __u32 length;};*/#define PORT_ISAKMP 500static struct ip_vs_conn *ah_conn_in_get(const struct sk_buff *skb, struct ip_vs_protocol *pp, const struct iphdr *iph, unsigned int proto_off, int inverse){ struct ip_vs_conn *cp; if (likely(!inverse)) { cp = ip_vs_conn_in_get(IPPROTO_UDP, iph->saddr, __constant_htons(PORT_ISAKMP), iph->daddr, __constant_htons(PORT_ISAKMP)); } else { cp = ip_vs_conn_in_get(IPPROTO_UDP, iph->daddr, __constant_htons(PORT_ISAKMP), iph->saddr, __constant_htons(PORT_ISAKMP)); } if (!cp) { /* * We are not sure if the packet is from our * service, so our conn_schedule hook should return NF_ACCEPT */ IP_VS_DBG(12, "Unknown ISAKMP entry for outin packet " "%s%s %u.%u.%u.%u->%u.%u.%u.%u\n", inverse ? "ICMP+" : "", pp->name, NIPQUAD(iph->saddr), NIPQUAD(iph->daddr)); } return cp;}static struct ip_vs_conn *ah_conn_out_get(const struct sk_buff *skb, struct ip_vs_protocol *pp, const struct iphdr *iph, unsigned int proto_off, int inverse){ struct ip_vs_conn *cp; if (likely(!inverse)) { cp = ip_vs_conn_out_get(IPPROTO_UDP, iph->saddr, __constant_htons(PORT_ISAKMP), iph->daddr, __constant_htons(PORT_ISAKMP)); } else { cp = ip_vs_conn_out_get(IPPROTO_UDP, iph->daddr, __constant_htons(PORT_ISAKMP), iph->saddr, __constant_htons(PORT_ISAKMP)); } if (!cp) { IP_VS_DBG(12, "Unknown ISAKMP entry for inout packet " "%s%s %u.%u.%u.%u->%u.%u.%u.%u\n", inverse ? "ICMP+" : "", pp->name, NIPQUAD(iph->saddr), NIPQUAD(iph->daddr)); } return cp;}static intah_conn_schedule(struct sk_buff *skb, struct ip_vs_protocol *pp, int *verdict, struct ip_vs_conn **cpp){ /* * AH is only related traffic. Pass the packet to IP stack. */ *verdict = NF_ACCEPT; return 0;}static voidah_debug_packet(struct ip_vs_protocol *pp, const struct sk_buff *skb, int offset, const char *msg){ char buf[256]; struct iphdr iph; if (skb_copy_bits(skb, offset, &iph, sizeof(iph)) < 0) sprintf(buf, "%s TRUNCATED", pp->name); else sprintf(buf, "%s %u.%u.%u.%u->%u.%u.%u.%u", pp->name, NIPQUAD(iph.saddr), NIPQUAD(iph.daddr)); printk(KERN_DEBUG "IPVS: %s: %s\n", msg, buf);}static void ah_init(struct ip_vs_protocol *pp){ /* nothing to do now */}static void ah_exit(struct ip_vs_protocol *pp){ /* nothing to do now */}struct ip_vs_protocol ip_vs_protocol_ah = { .name = "AH", .protocol = IPPROTO_AH, .dont_defrag = 1, .init = ah_init, .exit = ah_exit, .conn_schedule = ah_conn_schedule, .conn_in_get = ah_conn_in_get, .conn_out_get = ah_conn_out_get, .snat_handler = NULL, .dnat_handler = NULL, .csum_check = NULL, .state_transition = NULL, .register_app = NULL, .unregister_app = NULL, .app_conn_bind = NULL, .debug_packet = ah_debug_packet, .timeout_change = NULL, /* ISAKMP */ .set_state_timeout = NULL,};
?? 快捷鍵說明
復(fù)制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -